mediumMultiple ChoiceObjective-mapped
FC0-U71 Practice Question: The IT administrator for a small accounting firm…
You are the IT administrator for a small accounting firm with 25 employees. The firm uses a Windows Server 2019 domain controller, a file server, and an email server running Microsoft Exchange. Each employee has a company-issued laptop running Windows 10. The firm recently experienced a ransomware attack that encrypted all files on the file server. The attacker demanded a ransom in Bitcoin. The firm restored the files from a backup that was taken the previous night. However, the CEO is concerned about future attacks and wants to implement additional security measures. The firm has a limited budget and cannot afford a full security suite. Which of the following is the BEST course of action to reduce the risk of another ransomware infection?
⚠ Common exam trap
Candidates often choose email spam filtering (Option C) because they associate ransomware with phishing, but they overlook that application whitelisting provides a deterministic, policy-based defense that blocks execution regardless of the delivery vector.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Implement application whitelisting on all workstations.
Application whitelisting prevents any unauthorized executable, script, or installer from running, which would block ransomware even if it reaches the system via email or web download. This is the most effective single control on a limited budget because it stops unknown malware at the execution point, regardless of patch status or user behavior.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Ensure all systems are patched monthly.
Why it's wrong here
Patching addresses known vulnerabilities, but ransomware can exploit zero-days or be delivered via social engineering without exploiting a vulnerability.
- ✓
Implement application whitelisting on all workstations.
Why this is correct
Application whitelisting allows only approved programs to run, blocking ransomware executables even if they are downloaded.
- ✗
Deploy an email spam filter to block phishing emails.
Why it's wrong here
Email filtering can reduce phishing attacks, but ransomware can also be delivered through other vectors such as malicious websites or USB drives.
- ✗
Conduct annual security awareness training for all employees.
Why it's wrong here
Training helps users recognize threats, but it is not foolproof and does not provide a technical barrier against all ransomware variants.
Go deeper
Related to this question
About these practice questions
Courseiva writes every FC0-U71 question from scratch — 988 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This FC0-U71 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the FC0-U71 exam.